Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
File:                     4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa (raw, json)
Hash identifier:          iZmAYD1NKl2IFo4z86EPWoXfPDI5yjplCfKAUOdA3BY=
Subject key identifier:   7D:19:72:6A:BD:03:3A:F0:2A:EC:49:4F:DD:4D:19:AE:76:D2:38:E3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0142DA8D216681A8A5600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:14:2d:a8:d2:16:68:1a:8a:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=712b1df5-668f-4784-a9f7-9ebe2fdcc0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:38:03:4a:49:91:bc:12:f4:4e:b0:90:b6:
                    14:58:07:f9:8b:ae:e1:cb:9b:e8:d4:df:bf:ca:1d:
                    a0:c0:a9:45:62:11:2a:65:90:48:54:39:db:42:41:
                    cd:8a:c5:7f:b7:ff:16:8a:4f:9e:14:7b:ff:4c:8c:
                    b6:fe:6b:da:47:99:e9:72:a6:37:6f:a7:b0:b3:b9:
                    1b:85:11:da:69:57:b2:d8:24:76:69:c1:19:b9:7a:
                    68:56:64:49:ba:56:24:2f:e2:a9:6f:b5:3a:13:6d:
                    8b:17:21:4b:98:6c:a9:cb:da:3a:66:50:87:50:ac:
                    9b:35:69:91:88:25:97:04:d6:5f:a9:9c:b2:52:57:
                    a1:2a:9b:43:f9:e2:18:2c:f4:2b:ab:5a:15:02:17:
                    c7:32:d0:3b:fc:c5:a7:3e:3f:07:86:37:16:4c:bd:
                    35:bc:d1:5a:7f:8e:6f:48:11:9e:a8:86:e9:c3:3a:
                    b3:4b:ba:08:45:7a:5a:ad:7b:af:20:04:8c:fc:21:
                    1f:1e:c8:0a:de:2e:2b:6e:ff:52:ff:27:b3:4c:9a:
                    6e:63:97:36:32:33:84:5f:d9:f1:22:3a:a1:85:09:
                    39:52:8a:e0:0a:8b:e6:a6:be:00:f0:06:25:81:8c:
                    82:07:07:31:f1:59:17:ad:9c:0b:cc:89:ff:ad:cc:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:72:6A:BD:03:3A:F0:2A:EC:49:4F:DD:4D:19:AE:76:D2:38:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b3:c3:9d:90:59:d9:03:c6:60:5e:4f:b6:40:6c:b9:0c:7f:
         d0:1c:c1:00:7c:78:89:e0:6e:b6:fd:29:ac:1b:00:19:44:1b:
         a2:d2:3b:26:d9:3b:51:85:5b:06:af:d2:d5:a6:2a:5b:05:86:
         84:80:fc:1f:3b:5c:2e:89:1c:80:9c:c7:5a:f3:1b:5c:ce:03:
         21:a1:38:de:ab:90:0f:c4:25:a8:a7:d3:bd:62:f2:b0:41:5f:
         8f:9b:52:a9:b2:e2:01:36:ee:13:b6:8d:0c:bf:70:a5:a4:f2:
         bc:93:2d:03:b8:e5:14:37:66:7c:a2:29:ae:e5:d7:51:35:68:
         52:6e:f6:c5:f7:a0:53:47:af:72:3e:60:95:19:a3:f7:e8:90:
         e2:4b:e9:69:6e:b5:d6:c1:14:cd:c5:2b:e9:ae:80:9c:ec:a6:
         63:5e:5e:12:3b:a7:72:06:1e:55:dd:90:32:e9:40:12:09:35:
         1a:9a:26:0e:f4:73:c3:d8:51:31:c1:96:34:d5:5a:12:a1:39:
         77:c1:3d:77:e6:c2:eb:bb:ac:13:25:0a:21:1d:92:dc:b2:01:
         d1:1a:da:4a:5d:2c:d1:56:53:9b:e0:4b:c7:88:31:d6:fc:d0:
         f1:01:4d:4f:45:af:a3:5a:5e:71:c7:96:3d:d7:f0:a2:04:fd:
         28:9b:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:18 2026 by rpki-client